Privacy Policy

CashyPay ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your personal information in accordance with the Data Privacy Act of 2012 (Republic Act No. 10173) and BSP regulations governing electronic money.

We collect information you provide directly, including your name, email, phone number, and government-issued ID for KYC verification. We also collect transaction data, device information, and usage analytics to provide and improve our services.

Your information is used to: (1) verify your identity and prevent fraud, (2) process your transactions and maintain your wallet, (3) provide customer support, (4) send important account notifications, and (5) comply with legal and regulatory requirements including AML/CFT regulations under BSP guidelines.

CashyPay employs industry-leading security measures including blockchain-secured transaction records, AES-256 encryption for data at rest, TLS 1.3 for data in transit, biometric authentication, and PCI-DSS compliant infrastructure. Access to your data is restricted and audited through our security operations center.

We do not sell your personal information. We may share data with: (1) partner banks and payment processors to complete transactions, (2) regulatory authorities as required by law, and (3) fraud prevention partners. All sharing is governed by strict data protection agreements.

You have the right to: (1) access your personal data, (2) request corrections, (3) request data deletion (subject to legal retention requirements), (4) opt out of marketing communications, and (5) export your transaction history. To exercise these rights, contact our privacy team.

For privacy concerns or data requests, contact our Data Protection Officer. We respond to all inquiries within 30 days. If you are not satisfied with our response, you may escalate to the National Privacy Commission (NPC) of the Philippines.